What’s Vulnerable › Vulnerabilities

CVE-2019-0306

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-12 · updated 2026-06-17

Description

SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as SpaceAuditors to execute requests to obtain a complete list of SAP HANA user IDs and names.

Affected products

• SAP SE SAP HANA Extended Application Services: 1.0

References

• https://launchpad.support.sap.com/#/notes/2771128
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242
• https://launchpad.support.sap.com/#/notes/2771128
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=521864242

Get alerted when CVE-2019-0306 or the next vulnerability affects your stack